• Home
  • About 404TS
  • Contact

404 Tech Support

Where IT Help is Found

  • Articles
    • Code
    • Entertainment
    • Going Green
    • Hardware, Gadgets, and Products
    • Management
    • Network
    • News
    • Operating Systems
    • Security and Privacy
    • Software
    • System Administration
    • Talking Points
    • Tech Solutions
    • Web
    • Webmaster
  • Reviews
  • Media
    • Infographics
    • Videos
  • Tech Events
  • Tools
    • How do I find my IP address?
    • Browser and plugin tests
  • Get a Technical Consultation
You are here: Home / Articles / Security and Privacy / Updating The DigiNotar Breach Away – Adobe, Apple, Microsoft, Mozilla, Google React

Updating The DigiNotar Breach Away – Adobe, Apple, Microsoft, Mozilla, Google React

2011-09-09 by Jason

If you haven’t been following the story so far, DigiNotar, a Dutch certificate authority that provides SSL certificates, was breached by hackers. A compromised CA doesn’t exactly convey the level of trust one would want from a certificate authority.

It was first detected that a wildcard SSL certificate for *.google.com was issued and Chrome threw up an additional warning when an Iran native tried to check his Gmail and suspected it was a man-in-the-middle attack. That fraudulent certificate was revoked by Google, Mozilla, and Microsoft quickly. The CA confirmed the attack but seemed to keep people in the dark about the problem and it was later exposed that the issue was far more expansive than originally assumed with possibly over 500 fraudulent certificates issued targeting organizations like Mozilla, Yahoo!, WordPress, Microsoft, Twitter, Tor Project and others.

Forensic security company Fox-IT is investigating DigiNotar and the Dutch government has stepped in to investigate the incident management. You can read the highlights of Fox-IT’s report on ISC.

Get your systems up to date and stay alert for situations like these. The hacker claiming responsibility for the DigiNotar breach was the same who breached Comodo previously. They recently claim to have also breached GlobalSign and will show the results soon. With very pro-Iran comments, the hacker responded to comments in another Pastebin submission. Comodohacker on Pastebin further stated that they could issue Windows Updates.

While every day users are unlikely to be directly affected by this breach, it is important to keep software up to date that automatically trusts signed certificates from this breached CA. The following vendors have provided updates or instructions to remove the DigiNotar certificates from their products.

  • Adobe Acrobat and Reader Also, Adobe publishes their Adobe Approved Trust List with DigiNotar removed.
  • Apple
  • Microsoft Update
  • Mozilla Firefox and Thunderbird (manual removal instructions and then updates to 6.0.2)
  • Google Chrome version 13.0.782.220

Filed Under: Security and Privacy

Trending

  • Social media is making us narcissistic
    In Infographics
  • Product review: iClever Himbox car Bluetooth adapter
    In Hardware, Gadgets, and Products, Reviews
  • Byte-dock, A New Docking Station For The Mac Book Pro
    In Hardware, Gadgets, and Products

Latest Media Posts

Find Out Where To Download SNES ROMs

Find Out Where To Download SNES ROMs

Multifunctional Video Conversion Tools – Wondershare Video Converter

Multifunctional Video Conversion Tools – Wondershare Video Converter

  • Popular
  • Latest
  • Today Week Month All
  • How to ‘Unblock’ multiple files at a time with PowerShell How to 'Unblock' multiple files at a time with PowerShell
  • Command line to take ownership and change permissions Command line to take ownership and change permissions
  • Increase IIS Private Memory Limit to improve WSUS availability Increase IIS Private Memory Limit to improve WSUS availability
  • SOLVED: “This modification is not allowed because the selection is locked.” SOLVED: "This modification is not allowed because the selection is locked."
  • Creating and editing views in phpMyAdmin Creating and editing views in phpMyAdmin
  • customer contactless payment for drink with mobile phon at cafe counter bar,seller coffee shop accept payment by mobile.new normal lifestyle concept The Latest Innovations In Payment Technology
  • How Digital Technology Brought the Rise of the CMO   How Digital Technology Brought the Rise of the CMO  
  • How to Purchase Cryptocurrencies? How to Purchase Cryptocurrencies?
  • Top 6 necessary aspects to consider when hiring Angular developers Top 6 necessary aspects to consider when hiring Angular developers
  • Full guide on drawbacks and benefits of Node.js for making the perfect choice for your business Full guide on drawbacks and benefits of Node.js for making the perfect choice for your business
Ajax spinner

Elevator Pitch

404 Tech Support documents solutions to IT problems, shares worthwhile software and websites, and reviews hardware, consumer electronics, and technology-related books.

Subscribe to 404TS articles by email.

Recent Posts

  • The Latest Innovations In Payment Technology
  • How Digital Technology Brought the Rise of the CMO  
  • How to Purchase Cryptocurrencies?

Search

FTC Disclaimer

404TechSupport is an Amazon.com affiliate; when you click on an Amazon link from 404TS, the site gets a cut of the proceeds from whatever you buy. This site also uses Skimlinks for smart monetization of other affiliate links.
Use of this site requires displaying and viewing ads as they are presented.

Copyright © 2023 · Magazine Pro Theme on Genesis Framework · WordPress · Log in